Security Advisory

CVE-2009-2939

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-09-21 19:00:00

Last updated 2024-08-07 06:07:37

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The postfix.postinst script in the Debian GNU/Linux and Ubuntu postfix 2.5.5 package grants the postfix user write access to /var/spool/postfix/pid, which might allow local users to conduct symlink attacks that overwrite arbitrary files.

← Browse all CVEs View on cve.org ↗